attack.t1115

Clipboard Data Collection Via OSAScript

Dec 1, 2023 · attack.collection attack.execution attack.t1115 attack.t1059.002 ·

Detects possible collection of data from the clipboard via execution of the osascript binary

PowerShell Get Clipboard

Nov 2, 2023 · attack.collection attack.t1115 ·

A General detection for the Get-Clipboard commands in PowerShell logs. This could be an adversary capturing clipboard contents.

Clipboard Collection with Xclip Tool

Oct 17, 2023 · attack.collection attack.t1115 ·

Share on:

Detects attempts to collect data stored in the clipboard from users with the usage of xclip tool. Xclip has to be installed. Highly recommended using rule on servers, due to high usage of clipboard utilities on user workstations.

Data Copied To Clipboard Via Clip.EXE

Feb 22, 2023 · attack.collection attack.t1115 ·

Share on:

Detects the execution of clip.exe in order to copy data to the clipboard. Adversaries may collect data stored in the clipboard from users copying information within or between applications.

PowerShell Get-Clipboard Cmdlet Via CLI

Feb 7, 2023 · attack.collection attack.t1115 ·

Share on:

Detects usage of the 'Get-Clipboard' cmdlet via CLI

Clipboard Collection of Image Data with Xclip Tool

Jan 10, 2023 · attack.collection attack.t1115 ·

Share on:

Detects attempts to collect image data stored in the clipboard from users with the usage of xclip tool. Xclip has to be installed. Highly recommended using rule on servers, due to high usage of clipboard utilities on user workstations.

Clipboard Collection with Xclip Tool - Auditd

Jan 10, 2023 · attack.collection attack.t1115 ·

Share on:

Detects attempts to collect data stored in the clipboard from users with the usage of xclip tool. Xclip has to be installed. Highly recommended using rule on servers, due to high usage of clipboard utilities on user workstations.